Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-9791
HistoryApr 26, 2019 - 5:29 p.m.

Type confusion

2019-04-2617:29:00
PRIOn knowledge base
www.prio-n.com
8

9 High

AI Score

Confidence

High

0.205 Low

EPSS

Percentile

96.4%

The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT) compiler and when the constructor function is entered through on-stack replacement (OSR). This allows for possible arbitrary reading and writing of objects during an exploitable crash. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.